Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/OSozPCauqZRrj5FYZCZShQYan60.roa
File: OSozPCauqZRrj5FYZCZShQYan60.roa (raw, json)
Hash identifier: gJTuyuPcePva2Pf/4Z3V1y7VTQjYV+P6FusXSLPZfSw=
Subject key identifier: 39:2A:33:3C:26:AE:A9:94:6B:8F:91:58:64:26:52:85:06:1A:9F:AD
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 0194266BF32E91B4C89FD733523EF14930D2
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/OSozPCauqZRrj5FYZCZShQYan60.roa
Signing time: Thu 02 Jan 2025 09:49:56 +0000
ROA not before: Thu 02 Jan 2025 09:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42945
IP address blocks: 185.192.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f3:2e:91:b4:c8:9f:d7:33:52:3e:f1:49:30:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Jan 2 09:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=392a333c26aea9946b8f915864265285061a9fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:75:c9:c4:36:6f:d2:d4:39:90:1e:ed:ba:cd:
5e:ba:ba:f5:cc:36:16:76:2a:73:b2:a1:7e:2f:c5:
7c:e8:b5:b7:85:dd:c5:4a:2e:e5:ff:d4:83:e1:19:
42:a0:42:ea:e6:2c:ba:37:d2:2e:b1:34:ee:6c:08:
e9:bc:7f:87:86:41:4b:b5:bc:33:43:f0:e6:d3:ad:
fc:66:a9:26:59:d2:5e:d5:9d:d9:d9:4d:7d:39:0b:
8a:5e:96:98:58:74:ef:82:93:63:fe:4b:5f:f2:6d:
4d:35:7d:84:f1:3c:15:54:8e:2f:4b:6a:85:fe:1c:
e9:cb:8a:3d:a6:23:bf:f2:54:bf:3e:d0:96:36:7f:
02:e0:b5:2d:ae:01:72:08:ca:0d:8a:a6:91:94:2b:
3c:bb:19:39:70:4e:bb:2d:1f:b0:df:6c:cc:43:b3:
79:cc:b3:8a:b3:ae:07:d2:ce:e0:f3:7a:1b:f9:dd:
07:45:da:46:69:f0:1c:08:5e:01:c3:54:95:97:6b:
99:dd:c6:0a:ea:78:af:6d:6a:27:72:6b:d8:5f:1e:
fc:75:74:55:63:b9:d2:87:0d:89:67:d8:7a:88:77:
b5:ec:45:31:c1:90:f3:ca:68:1b:d4:b9:63:3a:42:
d1:1a:b7:6e:1a:f8:65:cb:3d:2d:63:37:67:14:8b:
f7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2A:33:3C:26:AE:A9:94:6B:8F:91:58:64:26:52:85:06:1A:9F:AD
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/OSozPCauqZRrj5FYZCZShQYan60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.100.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:2a:df:7a:c0:eb:5d:14:c9:bf:57:42:11:55:cb:5c:05:2f:
8c:7d:77:6b:1b:15:84:13:b5:64:29:60:7d:50:45:ed:55:97:
a1:83:64:ee:15:84:53:fb:7b:a1:29:cb:29:5b:73:96:7e:ac:
7b:0c:0e:43:a3:c3:07:ea:7c:00:e0:bd:b2:c0:57:1b:b7:14:
45:cf:75:e4:97:12:51:ef:a6:92:7e:05:6e:ba:53:7b:1f:cb:
15:33:1b:58:9b:84:0f:75:30:b6:fe:59:b0:fc:83:5e:94:1f:
15:f4:58:6d:af:da:62:32:fa:2a:90:bc:7a:6b:6a:ff:c3:bf:
73:45:2f:71:8e:9d:f0:0d:42:0c:f2:18:02:23:bd:d4:bc:aa:
68:55:35:78:a1:8d:de:f1:ec:dc:bd:cf:07:21:13:a7:99:5f:
b5:1d:3a:5b:b5:3a:b8:73:8b:13:fa:61:fa:7a:d5:bb:e4:77:
22:91:d5:f7:05:e4:c3:02:55:b0:f0:8b:57:6f:10:d8:c3:e8:
e6:2a:f6:2a:85:5a:89:65:65:8c:25:9d:3b:00:64:65:72:44:
15:f6:86:b2:04:9a:33:38:16:35:96:17:42:92:88:7b:2f:43:
f5:2f:75:6b:a2:b1:6d:8b:2d:b0:89:9c:0f:be:aa:b2:01:9f:
a1:c1:e4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:49 2025 by rpki-client on console.sobornost.net